Integration Guides

Authentication

Visit the Authentication Reference for a deep dive on OAuth with Croissant.

General Overview

  • You will need a Bearer token to make authenticated requests, such as POST /carts or POST /products
  • You will include an Authorization: Bearer <access_token> header with authentication requests.
  • Bearer tokens expire after 1 hour.

Generate your access token POST /token

You should have already received your clientId and clientSecret. Make a POST request to the token endpoint to generate an access token. In your store, it might look something like this:

Make Authenticated Requests

Requests to endpoints such as POST / carts or POST / products must authenticated and server-side.

Add an authorization header to these requests. It will look something like
Authorization: Bearer <access_token>


What’s Next

Read more about Authentication with Croissant or begin your catalogue sync: